CVE-2023-47455: Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request…

critical9.1CVSS 3.1

AVNACLPRNUINSUCNIHAH

Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their size.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
tenda	ax1806_firmware	—	—